Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Nmap Hackers: Re: Fingerprint?

Re: Fingerprint?

From: Brutus <brutus_at_hoobie.net>
Date: Sun, 01 Nov 1998 23:31:56 +0000

Hi,

I too have noticed this problem running nmap 2 on debian linux 2
(2.0.34), I find that it often shows active ports on the target which
are actually only active on the localhost upon which nmap is running. I
get this with my port 6000 X relay and my HTTP proxy on port 8081.

Not sure why this happens on vanilla tcp scans...

regards

G

Takacs Istvan wrote:

> Hi,
>
> Thanks for everyone, who answered to my
> question!
>
> I didn't mention that our web servers behind
> a Solaris based firewall (FW-1)!
> That's why I was very surprised when I saw the
> resoult of the scan (The web servers are on
> NT IIS 3.0):
>
> No ports open for host (xxx.xxx.xxx.xxx)
> Interesting ports on www.mysite.hu (xxx.xxx.xxx.xxx):
> Port State Protocol Service
> 22 open tcp unknown
> 53 open tcp domain
> 110 open tcp pop-3
> 143 open tcp imap
>
> We never enabled that ports above. On our firewall
> just the 80 and 443 ports are enabled to the servers.
>
> Are that open ports real, or just a bug in nmap? And why
> missing the enabled ports from the list?
> I don't understand.
>
> Thanks a lot!
>
> Regards,
>
> Istvan
Received on Nov 01 1998

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos